
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
auto-timesheet
Advanced tools
Add redmine timesheet automatically and periodically.
:balloon: Auto-timesheet 2 has released - with Gitlab support! :stuck_out_tongue_winking_eye:
:warning: Important: This package is pre-configured for Cubet Technolabs Policies. If you need to configure this app for your workstation, please rise an issue and I'll reach you back.
Created and maintained at free times for fun.
npm i -g auto-timesheet
verify with auto-timesheet --version
.
auto-timesheet conf
It opens up a config file. Alter it and save. Make sure you didn't made any syntax mistakes with the opened json file.
By default it will open the editor mentioned in the $EDITOR env_var. If none, be prepared for vi.
projectId
: The timesheet project id in which you are working on. You should find this by inspecting the web interface of timesheet. If you need any assistance, feel free to open an issue.activityInterval
: Interval in milliseconds.defaultIssue
: If auto-timesheet
couldn't extract any issues from your commit messages, this issue will be used.git-service
: selected git service. Possible options: github
and gitlab
. Based on this value, corresponding git configuration is used.config.github.url
: Github api url to fetch commits of your repo.config.github.commitAuthorEmail
: email of the committer. commit messages are extracted based on this email.config.github.username
: Github username.config.gitlab.url
: Gitlab api url to fetch commits of your repo.
here is an example template:http://<host(eg:192.168.1.55)>/api/v4/projects/<project_id(eg: 80. look this at the settings page of your repo OR ask repo owner)>/repository/commits
eg: http://192.168.1.55/api/v4/projects/80/repository/commits
config.gitlab.commitAuthorEmail
: email of the committer. commit messages are extracted based on this email.issueMatchingInsensitivity
[Recommended 4
] : For best results, this should be an integer in between 0
and 10
. Lesser the value, it is more likely that the package will create new issues. Higher the value, the package will try to match the extracted issue with existing issues and if both are matching (the degree of matching is based on the issueMatchingInsensitivity
value), the existing issue will be reused. In other words, accuracy of the matchness is based on this value. Lesser the value means more accurate and higher the value means less accurate.use star-tags (*thisIsStarTag
) to mention the timesheet-issue/issues you are addressing with this commit.
An example commit message be like:
Improves *login security and updates *documentation
Here login
and documentation
are timesheet issues. The package will choose one randomly and create/use that issue for this commit message.
auto-timesheet start
run the following to see all available commands.
auto-timesheet help
will give you:
Usage: auto-timesheet [options] [command]
Options:
-V, --version output the version number
-h, --help output usage information
Commands:
conf configure stuff
start start application
reset reset this package [config will be deleted]
migrate migrate configuration file version to compatible version
without loosing current configurations
help [cmd] display help for [cmd]
Please report it at github issues
MIT © Vajahath Ahmed
FAQs
Add redmine timesheet automatically and periodically.
The npm package auto-timesheet receives a total of 2 weekly downloads. As such, auto-timesheet popularity was classified as not popular.
We found that auto-timesheet demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.